October 2004

Issue 14

[ TELL A FRIEND ]  

 The Weakest Link: Social Engineering - "We've met the enemy, and it is us." (Pogo)

Security Gumshoe Tracks the Falcon Hacker

When IP addresses and passwords get into the wrong hands

by Mark Robertson, Social Engineering Consultant and CTO
Part 2 of a continuing series

Well, I'll be a dope on a rope! I shook myself out of my stupor from starin' at a monitor all day. I stood up, left my office and ran down the stairs past "Killer," the most feisty Lhasa Apso known to mankind. That mangy thing has attitude. But that's another story. Let's just say I had a nasty scar in a rather sensitive area to prove it.

I glared at Killer, left the building and rounded the corner to see my oasis. Bernie at the greasy spoon is always good for a free meal, but the downside is he's gonna talk my leg off. How a place can stay frozen in time for 30 years is beyond me. As I walked in, something caught the corner of my eye ... a guy was palming a Cap'n Crunch whistle. "You here for the meetin'?" he asked, flashing it to me.

I forgot it was the first Friday of the month, a nice 2600 meeting (typically a meeting of hackers and the technologically curious) with three others attending. Phreakers. Gotta love 'em. From time to time, they stumble on some good info, makes my work a little easier. [ Read More ... ]


 

  Security Webinar Series

Introduction to Proactive Patch Management Webinar

Tired of fighting fires?

from Shavlik Technologies

Register for this free security webinar held Thursdays at noon, CDT and understand the elements of building and maintaining a secure environment.


 

 Editorial Corner

Outnumbered, Outsmarted and Outplayed

Chip Byter, PI, returns for Part II where he deals with IP addresses and stolen passwords. He digs deep as he searches for information on the dame who escaped with his money in Part I.

Whether or not you're the lone IT person in your shop, many know how it feels because you're outnumbered by many users. It leaves little time for anything else, especially staying up to date. It's risky not to know what's happening in the world of security as all too often something new appears affecting many users. So what are you supposed to do about it? Lose sleep? Already done that, eh? Readers offer lots of options in dealing with the situation.

Tell us your tales of IT adventures and ask questions in the quick (it does take more than five seconds) reader survey. We know you're doing the job of three people, so to thank you for completing the survey, we'll enter your name in a drawing where you could win a geeky prize, a PAIR of Garmin Rino 110 GPS.

Best,
Meryl K. Evans
Editor

To unsubscribe instantly or change your preferences, see links at the bottom …
 

 Reader Survey

Complete our 1-minute reader survey and you could win a PAIR of Garmin Rino 110 GPS.

Congratulations to this month's winner:
Adam Coyne - IGN/GameSpy


 

 Spotlight

Indiana University automates software security patching

Attend Our Virtual Trade Show



 

 Subscription

Designed for Security Professionals:

Privacy Policy


[ Subscribe Here ]
 

 Partners


 

 Resources

Shavlik Forums

PatchManagement.org

ISSA

InfraGard

Computer Security Institute
 

 Archives

Issue 22
June 22, 2005
Issue 21
May 19, 2005

[MORE]

 Security Resources

Featuring:
Thinking Like a Hacker

Out think them by knowing how they work from the inside out (PDF)

by Eric Schultze, Shavlik Technologies


Visit the Shavlik Support Forums

A place to exchange information about Shavlik Security Products

from Shavlik Technologies


 

 What's Your Best Advice?

Last Issue's Security Dilemma:

The Lone Ranger

Doing more with less has become a standard way of life. For me, it's turned into a situation of barely keeping afloat. Customers are important and staying up to date is vital to ensuring I can fix all the problems.

As the only IT guy, I am finding it hard to provide all the answers and stay up to date while keeping everyone happy, and user numbers are increasing—the old doing more with less problem. There is so much out there to learn and usually no time to read or play with it. No doubt, many people are in the same boat and have learned to cope with the situation. What would your readers do?

—Dylan B., Systems Engineer

Read the best advice from readers of The Remediator Digest
 


This Issue's Security Dilemma:

Permissions Come Undone

I've just been informed that a few of our consultants are no longer part of the "inner circle" on our network due to a new security directive. They will be allowed one part of the network but not another area. This presents a huge problem as I have to change the local and group policies. They cannot be part of the local admin group with global access, but in making what would be the proper restrictions, it will derail the windows update as it requires membership to apply critical patches.

I've learned not to assign permissions to a group, but the damage has been done. How do I solve this problem?

- Kevin, SysAdmin

Can You Help?

Share your experience.
You could win a Dell Digital Jukebox Music Player.

    Congratulations to this month's winner:
    Gregory Brooks, Director, Information Services -
Triton Coal Co., LLC.


 

 The Pointy-Haired Boss

Know how to get what you need:

Intelligent Disobedience

How to minimize problems from half-baked management ideas
by Gopal K. Kapur - ComputerWorld

 

How to…Prioritize Executive E-Mail Through Exchange 2003

How to keep the fat cats meowin'
by Harry Brelsford - CertMag.com

 

 Stayin' The Alpha Dog

Take charge of your career:

When Spyware Crosses the Line

Popular tools won't catch them all
by Kelly Martin - SecurityFocus

 

Identity Theft: Criminal Behavior Meets the Information Age

Protect your organization and yourself
by David Gulbransen - InformIT

 

 In Your Down Time

For a well-deserved breather:

Capture the Flag Competitions Can Net Far More Than Fun

Boost morale while gaining security skills
by Anne Saita - SearchSecurity.com

 

Online Music Revolution

Travel with song
from CNN

 

Editorial Team

“We are secure with InternetVIZ's editorial expertise."

Michael K. Thomas, VP Products, Shavlik Technologies, LLC

InternetVIZ can make newsletters work for you! For more information ...

Privacy Policy
Sponsored by Shavlik Technologies
Copyright © 2004 InternetVIZ, LLC. All rights reserved.
[ TELL A FRIEND ]  

Powered by IMN